Navigate

Check: GEN003580

VMware ESX 3 Server: GEN003580 (in version v1 r2)

Title

The system must use initial TCP sequence numbers most resistant to sequence number guessing attacks. (Cat II impact)

Discussion

One use of initial TCP sequence numbers is to verify bidirectional communication between two hosts, which provides some protection against spoofed source addresses being used by the connection originator. If the initial TCP sequence numbers for a host can be determined by an attacker, it may be possible to establish a TCP connection from a spoofed source address without bidirectional communication.

Check Content

Determine if the system uses easily guessable initial TCP sequence numbers. If it does, this is a finding.

Fix Text

Configure the system to use initial TCP sequence numbers most resistant to sequence number guessing attacks.

Additional Identifiers

Rule ID: SV-12502r2_rule

Vulnerability ID: V-12001

Group Title: GEN003580

Expert Comments

Expert comments are only available to logged-in users.

CCIs

CCIs tied to check.

Number	Definition
CCI-001436	The organization disables organization-defined networking protocols within the information system deemed to be nonsecure except for explicitly identified components in support of specific operational requirements.

Controls

Controls tied to check. These are derived from the CCIs shown above.

Number	Title
No controls are assigned to this check